---
title: Salesforce Provisioner
description: The Salesforce Provisioner allows PingFederate to integrate with Salesforce customer relations management (CRM) products, such as Sales, Communities, and Chatter. The integration enables single sign-on (SSO) and allows PingFederate to provision users and groups to Salesforce.
component: salesforce
page_id: salesforce:salesforce_provisioner:pf_salesforce_connector
canonical_url: https://docs.pingidentity.com/integrations/salesforce/salesforce_provisioner/pf_salesforce_connector.html
revdate: June 25, 2024
section_ids:
  provisioning-connector: Provisioning connector
  features: Features
  intended-audience: Intended audience
  system-requirements: System requirements
---

# Salesforce Provisioner

The Salesforce Provisioner allows PingFederate to integrate with Salesforce customer relations management (CRM) products, such as Sales, Communities, and Chatter. The integration enables single sign-on (SSO) and allows PingFederate to provision users and groups to Salesforce.

## Provisioning connector

Allows PingFederate to manage users and groups in Salesforce based on changes in an external user datastore. Includes a quick-connection template that helps you create a connection to Salesforce by pre-populating some configuration settings.

The provisioner allows you to enable the create, update, and disable capabilities independently and customize other provisioning behaviors.

## Features

* Manages users

  * Creates, updates, and disables users.

  * Allows you to enable the create, update, and disable capabilities independently.

  * Allows you to provision users with a "disabled" status.

  * Allows you to deprovision users with a "freeze" or "disable" action.

  * Allows you to merge or overwrite user permission sets.

* Manages groups

  * Creates and deletes groups.

  * Updates group memberships.

* Enables browser-based SSO initiated by the service provider (SP) or identity provider (IdP).

* Pre-populates some connection settings with the included quick connection template.

## Intended audience

This document is intended for PingFederate administrators.

You can get help during the setup process by referencing the following resources:

* The following sections of the PingFederate documentation:

  * [Datastores](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_datastores.html)

  * [SP connection management](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_sp_connect_management.html)

  * [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html)

  * [Configuring outbound provisioning settings](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_protocolsettingstasklet_saasglobalprovisioningsettingsstate.html)

## System requirements

* PingFederate `8.0` or later.

* Administrator access to a Salesforce organization account. The account must have "View All Data" permissions. Learn more about account permissions in [Enable OAuth Settings for API Integration](https://help.salesforce.com/articleView?id=connected_app_create_api_integration.htm\&type=5) in the Salesforce documentation.

* To provision to Salesforce Communities, the communities feature must be enabled in Salesforce.

* To allow PingFederate to make outbound connections to Salesforce, you might need to allow the following endpoint in your firewall: https\://*your\_salesforce\_domain*.com.